anishgirianish commented on issue #47952:
URL: https://github.com/apache/airflow/issues/47952#issuecomment-3832932390

   Hi, I've opened a PR for this :  
[#61339](https://github.com/apache/airflow/pull/61339 )     
   
   The implementation adds a revoked_token table that stores JWT token  JTIs on 
logout. Each authenticated request checks the token's JTI against this table 
before granting access. Expired entries are cleaned up automatically through 
the existing db_cleanup mechanism.  
    
   I'd really appreciate any feedback on the approach. Happy to adjust anything 
based on your suggestions. Thank you! 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to